Security
How does an AI system fit safely into your operation?
By fixing up front who may do what, which step a person approves, what happens to your data and who owns the system. Nine agreements that apply to every system we build, and that are here so you do not have to ask for them.
Minimal rights
A system gets access to exactly what it needs to do its work, and nothing beyond that. No broad admin keys because that is quicker to set up.
A person signs off
For steps with consequences outside the company, such as sending something or committing an amount, an approval sits in between by default. We agree per workflow what may run fully automatically.
Auditable where required
Where a workflow requires logging or auditability, we build it in as part of the system: what happened, when and on what basis. Which steps those are is agreed per workflow.
Separated data
Your data sits apart from that of other clients and is not used to train models. What is stored where is set out per assignment.
Which model runs is a choice
Which provider carries out a task is laid down in the set-up and can be set per environment. There is no hidden routing to a service you did not choose, and replacing a provider is a setting, not a rebuild.
GDPR-aware set-up
Per workflow we look at which personal data is really needed, how long it has to be kept and where it is processed. That is a design choice, not a tick-box afterwards.
Managed access
Connections run on keys that are yours and that you can revoke. If someone leaves or we stop working together, access is one action to undo.
Visible in operation
You should notice a system that stalls before a client does. Where we agree monitoring, we build it in: a signal when it is not running or not doing what it should.
You keep it
The workflow, the data and the system are yours. Even if you later go on without us.
Belvi holds no certifications or quality marks. The above is how we work, and we set it out in writing per assignment. If you have your own security policy or a questionnaire from your IT team, do send it over: we will go through it together.
Compare this to your policyQuestions about a specific connection or data flow? Email amine@belvi.io.